This international standard is a technical specification which provides detailed guidance on how to establish, implement, and maintain a Business Impact Analysis (BIA) process. It does not suggest a uniform process for performing a Business Impact Analysis but assists the organization to design a BIA process that meets their requirements. Organizations cannot certify their BIA to ISO 22317; however, they can use it as a guidance to effectively implement a BIA process. ISO 22317 is the first and the only standard which solely addresses the Business Impact Analysis. It is designed to complement ISO 22301; nonetheless, it can be used as a stand-alone standard. The aim of Business Impact Analysis processes is to analyse the actual impact of a disruptive event on the organization.

ISO 22301 Business Continuity ISO 22316 Organizational Resilience ISO 22317 Business Impact Analysis ISO 22320 Emergency Management Disaster Recovery ISO 28000 Supply Chain Security